Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: 6M2XXx1uyGwkIUZuIXLcy4RV0GxS0M5XMJ9NdjV1zJM=
Subject key identifier: 47:0D:78:91:06:EF:43:42:DF:8E:23:13:FE:B2:BD:BA:A5:5C:30:D3
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 01940721C74E6F2D54A93748A742B3082DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 13CA
Signing time: Fri 27 Dec 2024 08:00:41 +0000
Manifest this update: Fri 27 Dec 2024 08:00:41 +0000
Manifest next update: Sat 28 Dec 2024 08:00:41 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: B7Ialdh75hylpu++eS8Ah9cEhXFTA6TV4WRzjq6EigQ=)
2: OmvpgIxEO2OtEwLz2ma7jcE1qaU.roa (hash: B1KjKFAbgf7jES+miYyFU21AJDfxsJAFkGgOs4G0LXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:21:c7:4e:6f:2d:54:a9:37:48:a7:42:b3:08:2d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Dec 27 08:00:41 2024 GMT
Not After : Dec 28 08:00:41 2024 GMT
Subject: CN=470d789106ef4342df8e2313feb2bdbaa55c30d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:7b:4b:2b:15:33:85:da:29:10:d7:38:74:
a8:7a:13:6f:a9:82:52:d9:f3:3f:3b:4f:a2:96:1e:
4d:f0:56:57:9f:be:89:73:99:6a:6d:db:c3:ba:46:
41:e6:34:c0:72:01:cd:26:56:2e:ca:70:f3:25:2b:
3a:12:8e:a5:48:be:3e:7f:cd:89:7d:e3:45:94:69:
65:94:6d:de:c3:0c:61:ac:42:02:59:a0:66:cd:9d:
f2:c2:70:69:28:9b:d9:06:3c:4d:e5:1f:9f:33:12:
8d:72:f6:f2:0b:e4:9d:7f:b0:f7:53:1b:cf:8c:71:
7e:6f:0a:02:a3:8f:5d:d7:9e:aa:cd:47:75:1d:63:
c4:d5:ce:d4:a9:70:f6:8d:c5:73:63:9b:12:58:47:
3d:5c:7f:55:de:a2:b6:01:0a:b7:4b:0f:97:93:4d:
4b:7a:7d:6c:2d:11:99:3d:c0:8d:34:99:cb:1e:58:
7e:cb:6c:2d:58:bc:16:b8:bc:a2:0d:4c:44:09:59:
e4:1a:a4:9e:08:cb:90:9b:98:ac:0b:a4:d2:82:08:
39:9f:de:bf:5d:35:72:b5:be:df:01:9b:5c:49:a1:
9d:ed:98:d3:df:49:1b:63:6a:4d:de:ae:81:da:6c:
c2:d3:63:70:ac:1d:49:d4:f6:de:05:a4:73:0a:bc:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0D:78:91:06:EF:43:42:DF:8E:23:13:FE:B2:BD:BA:A5:5C:30:D3
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7e:74:46:c8:3b:a2:23:5a:68:c2:93:38:6f:03:86:32:90:
2d:e7:81:cf:e4:08:72:4d:55:c0:53:59:01:77:ab:93:ab:3b:
86:bf:91:62:e7:49:ec:92:08:25:50:3b:28:7d:da:20:c9:6d:
ff:39:a5:4a:ff:d0:7b:91:97:2b:dc:61:bc:3e:fb:b8:37:d7:
31:b4:b5:de:bf:51:de:ba:98:4a:97:dd:65:9f:fd:61:40:c9:
9a:e6:52:ca:0f:ce:69:1a:64:cb:4f:84:c7:20:02:aa:80:74:
cb:20:7a:ac:ab:ea:89:07:91:99:f5:fc:8a:7f:48:43:c1:cf:
16:98:67:89:67:10:d4:c7:c2:83:71:ae:8c:4e:e4:91:96:f4:
27:33:e7:8d:79:37:41:a5:28:ad:19:b6:3a:b5:b1:79:dd:bb:
d5:4f:5f:89:1c:1d:da:dc:23:d1:c3:4a:07:e7:59:c3:27:58:
f4:38:9e:a0:e4:75:c4:1e:ee:68:dd:76:92:96:68:52:3a:03:
a0:b9:bc:c1:2e:3b:bd:cf:10:5c:e6:af:f3:37:a6:9e:7d:79:
97:c3:2d:89:dd:1e:e6:2c:4d:35:0a:fd:a3:fe:c7:79:d8:ae:
4b:d8:0a:ef:cc:1d:26:8d:f1:ab:b8:d4:ef:02:db:76:4f:77:
b4:bf:63:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:50:26 2024 by rpki-client on console-ams.rpki-client.org